Solved

Active Directory Repeated Account Lockouts

Posted on 2011-09-09
2
462 Views
Last Modified: 2012-06-21
Starting today one of my users account keeps getting locked out.  Approximately on 15 minute intervals.  Is there any way to see who or what is sending the failing authentication requests?

My active driectory is Win 2003
0
Comment
Question by:deklinm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 5

Accepted Solution

by:
Eduardo Goicovich earned 500 total points
ID: 36513229
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36513230
First step id reccomend is to download the ALtools kit from microsoft. This gives you a tool that will tell you the time and locking domain controller of the user account being locked out.

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=18465

From there you can open the logging on the domain controller to find the event ID generated for the failed logon if you have auditing enabled. This will tell you the originating computer the lock came from and the type of logon process.
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question